CVE-2021-30181
CRITICALApache Dubbo 2.5.0-2.6.8 and 2.5.0-2.7.8 - Remote Code Execution via Script Routing Rule Parsing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-30181. PoCs published by shoucheng3.
AI-analyzed exploit summary The repository appears to be a fork or snapshot of the Apache Dubbo project without any exploit code or technical analysis related to CVE-2021-30181. It contains standard project files (e.g., .asf.yaml, GitHub templates) but no PoC, scanner, or writeup.
Description
Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these rules, Dubbo customers use ScriptEngine and run the rule provided by the script which by default may enable executing arbitrary code.
Exploits (1)
The repository appears to be a fork or snapshot of the Apache Dubbo project without any exploit code or technical analysis related to CVE-2021-30181. It contains standard project files (e.g., .asf.yaml, GitHub templates) but no PoC, scanner, or writeup.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H